# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where](https://agentprime.io/advisories/CVE-2026-94146.md)
  `CVE-2026-94146` · CVE record: BioStar BIOS Update Utility · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption, CWE-123
- [WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-82187.md)
  `CVE-2026-82187` · CVE record: Unknown Web to Print Online Designer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Unrestricted file upload
- [BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where](https://agentprime.io/advisories/CVE-2026-94142.md)
  `CVE-2026-94142` · CVE record: BioStar Temperature Monitor Utility · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption, CWE-123
- [BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where](https://agentprime.io/advisories/CVE-2026-94129.md)
  `CVE-2026-94129` · CVE record: BioStar VALKYRIE AURORA · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption, CWE-123
- [BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where](https://agentprime.io/advisories/CVE-2026-94128.md)
  `CVE-2026-94128` · CVE record: BioStar VIVID LED DJ · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption, CWE-123
- [Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow](https://agentprime.io/advisories/CVE-2026-94101.md)
  `CVE-2026-94101` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption
- [Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow](https://agentprime.io/advisories/CVE-2026-94100.md)
  `CVE-2026-94100` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Memory corruption
- [Netcore NBR200V2 Backup Restore restore.cgi command injection](https://agentprime.io/advisories/CVE-2026-94099.md)
  `CVE-2026-94099` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection](https://agentprime.io/advisories/CVE-2026-94098.md)
  `CVE-2026-94098` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary…](https://agentprime.io/advisories/CVE-2026-88405.md)
  `CVE-2026-88405` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Code injection
- [A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary…](https://agentprime.io/advisories/CVE-2026-88404.md)
  `CVE-2026-88404` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Code injection
- [A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.](https://agentprime.io/advisories/CVE-2026-88402.md)
  `CVE-2026-88402` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: SQL injection
- [An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when language is js/javascript.This allows arbitrary code ex…](https://agentprime.io/advisories/CVE-2026-78847.md)
  `CVE-2026-78847` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Code injection
- [Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution (RCE) via unauthenticated access to the setServerConfig API endpo…](https://agentprime.io/advisories/CVE-2026-67827.md)
  `CVE-2026-67827` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Code injection
- [CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload by URL" functionality).](https://agentprime.io/advisories/CVE-2026-36469.md)
  `CVE-2026-36469` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection](https://agentprime.io/advisories/CVE-2026-94097.md)
  `CVE-2026-94097` · CVE record: Netcore NBR200V2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 LAN IP Configuration network_tools command injection](https://agentprime.io/advisories/CVE-2026-94096.md)
  `CVE-2026-94096` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection](https://agentprime.io/advisories/CVE-2026-94095.md)
  `CVE-2026-94095` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow](https://agentprime.io/advisories/CVE-2026-94089.md)
  `CVE-2026-94089` · CVE record: D-Link DIR-868L · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7](https://agentprime.io/advisories/CVE-2026-88857.md)
  `CVE-2026-88857` · CVE record: OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Unrestricted file upload
- [Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7](https://agentprime.io/advisories/CVE-2026-88854.md)
  `CVE-2026-88854` · CVE record: OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: SQL injection
- [Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7](https://agentprime.io/advisories/CVE-2026-88856.md)
  `CVE-2026-88856` · CVE record: OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Code injection
- [Code injection in Vanderbilt University REDCap](https://agentprime.io/advisories/CVE-2026-90817.md)
  `CVE-2026-90817` · CVE record: Vanderbilt University REDCap · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Path traversal, Code injection
- [Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow](https://agentprime.io/advisories/CVE-2026-94003.md)
  `CVE-2026-94003` · CVE record: Comfast CF-N1-S · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [NivoCart through 2.4.0 Predictable Administrator Password Reset Token](https://agentprime.io/advisories/CVE-2026-94107.md)
  `CVE-2026-94107` · CVE record: nivocart nivocart · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Weak cryptography or TLS
- [Use after free in OISF Suricata](https://agentprime.io/advisories/CVE-2026-94084.md)
  `CVE-2026-94084` · CVE record: OISF Suricata · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [Type confusion in OISF Suricata](https://agentprime.io/advisories/CVE-2026-94083.md)
  `CVE-2026-94083` · CVE record: OISF Suricata · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [D-Link R95 DHMAPI ssi system os command injection](https://agentprime.io/advisories/CVE-2026-93958.md)
  `CVE-2026-93958` · CVE record: D-Link R95 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Command injection
- [OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE](https://agentprime.io/advisories/CVE-2026-93985.md)
  `CVE-2026-93985` · CVE record: Openpanel-dev openpanel · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Code injection
- [DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM](https://agentprime.io/advisories/CVE-2026-78030.md)
  `CVE-2026-78030` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Code injection
- [Totolink A3002MU formWsc command injection](https://agentprime.io/advisories/CVE-2026-93742.md)
  `CVE-2026-93742` · CVE record: Totolink A3002MU · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Other injection, Command injection
- [Botiga Pro < 1.6.5 - Unauthenticated Arbitrary Blog Options Update via Templates Builder REST Route](https://agentprime.io/advisories/CVE-2026-86591.md)
  `CVE-2026-86591` · CVE record: Unknown Botiga Pro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Broken access control
- [Totolink A3002MU formWlWds buffer overflow](https://agentprime.io/advisories/CVE-2026-93741.md)
  `CVE-2026-93741` · CVE record: Totolink A3002MU · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Memory corruption
- [WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content](https://agentprime.io/advisories/CVE-2026-89274.md)
  `CVE-2026-89274` · CVE record: brechtvds WP Recipe Maker · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Code injection
- [Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter](https://agentprime.io/advisories/CVE-2026-92229.md)
  `CVE-2026-92229` · CVE record: wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Code injection
- [Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field](https://agentprime.io/advisories/CVE-2026-84434.md)
  `CVE-2026-84434` · CVE record: Gravity Forms Gravity Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Unrestricted file upload
- [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md)
  `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Totolink A3002MU formWlEncrypt buffer overflow](https://agentprime.io/advisories/CVE-2026-93740.md)
  `CVE-2026-93740` · CVE record: Totolink A3002MU · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Totolink A3002MU formWlAc buffer overflow](https://agentprime.io/advisories/CVE-2026-93739.md)
  `CVE-2026-93739` · CVE record: Totolink A3002MU · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Totolink A3002MU formSchedule buffer overflow](https://agentprime.io/advisories/CVE-2026-93738.md)
  `CVE-2026-93738` · CVE record: Totolink A3002MU · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [FluidSynth: Heap-based buffer overrun](https://agentprime.io/advisories/CVE-2026-58264.md)
  `CVE-2026-58264` · CVE record: FluidSynth fluidsynth · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG](https://agentprime.io/advisories/CVE-2026-93868.md)
  `CVE-2026-93868` · CVE record: Cotonti Cotonti · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [CordysCRM SSE Notification Stream Hijack via \`/sse/subscribe\`](https://agentprime.io/advisories/CVE-2026-63647.md)
  `CVE-2026-63647` · CVE record: 1Panel-dev CordysCRM · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass, Broken access control
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84082.md)
  `CVE-2026-84082` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84078.md)
  `CVE-2026-84078` · CVE record: IBM Guardium Data Protection · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84075.md)
  `CVE-2026-84075` · CVE record: IBM Guardium Data Protection · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84073.md)
  `CVE-2026-84073` · CVE record: IBM Guardium Data Protection · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection
- [pg_partman has privilege escalation through SQL injection in create_partition_time()](https://agentprime.io/advisories/CVE-2026-61781.md)
  `CVE-2026-61781` · CVE record: pgpartman pg_partman · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection, Privilege escalation
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84064.md)
  `CVE-2026-84064` · CVE record: IBM Guardium Data Protection · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84031.md)
  `CVE-2026-84031` · CVE record: IBM Guardium Data Protection · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS)
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82967.md)
  `CVE-2026-82967` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82832.md)
  `CVE-2026-82832` · CVE record: IBM Guardium Data Protection · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS)
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82340.md)
  `CVE-2026-82340` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Code injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-81657.md)
  `CVE-2026-81657` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Insecure deserialization
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-80442.md)
  `CVE-2026-80442` · CVE record: IBM Guardium Data Protection · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-80441.md)
  `CVE-2026-80441` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection
- [IBM Sterling File Gateway is Vulnerable to Authentication Bypass](https://agentprime.io/advisories/CVE-2026-75878.md)
  `CVE-2026-75878` · CVE record: IBM Sterling File Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint](https://agentprime.io/advisories/CVE-2026-93839.md)
  `CVE-2026-93839` · CVE record: ModelTC LightLLM · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree](https://agentprime.io/advisories/CVE-2023-54399.md)
  `CVE-2023-54399` · CVE record: Hongjing e-HR · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection
- [Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass](https://agentprime.io/advisories/GHSA-xcw4-53cc-hv32.md)
  `GHSA-xcw4-53cc-hv32`, `CVE-2026-59163`, `PYSEC-2026-4106` · PyPI `mnemosyne-memory`: affected `<3.10.1`, fixed in `3.10.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA5LTE4VDE3OjU0OjI2LjAwMDAwMFoiLCJHSFNBLXhjdzQtNTNjYy1odjMyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA5LTIxVDA4OjU5OjAwLjQ2NTAwMFoiLCJDVkUtMjAyNS0xMjk5OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA5LTIxVDA4OjU5OjAwLjQ2NTAwMFoiLCJDVkUtMjAyNS0xMjk5OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.